Charges Against CISOs Create Worries, Hope In Security Industry: Survey
Security Boulevard, Thursday, December 12th, 2024
A U.S. District Court judge may have dismissed most of the federal charges brought against SolarWinds CISO Tim Brown, but the case and others like it continue to ripple through the industry.
A recent survey by anti-ransomware vendor BlackFog of IT security decision-makers in the United States and UK found that 70% felt that cases like Brown's, where the CISO is held personally responsible for cybersecurity incidents at their companies, negatively affected their opinions about the position, with 34% say that being prosecuted after an attack created a no-win situation for them.
Essentially, there will be consequences internally if they report security failings that may have made their organizations vulnerable to an attack and prosecuted by the federal government if they don't report them. This becomes an even larger concern because government agencies are putting more regulations in place to require organizations to report cyberattacks.